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(57)Abstract: Jf 
PROBLEM TO BE SOLVED: To perform adaptive packet 
filtering and access control corresponding to a user or a 
user's location. 

SOLUTION: A certification server 3 certifies a user by using 
a group of user's ID and a password received from a 
terminal 2 or a certificate of IPSec. At the time of deciding 
a normal user, the server 3 specifies the user by using the 
user's ID for user certification or the certificate of IPSec, 
specifies a user's location at the time of a certification 
request from the transmitting source IP address of the 
certification request or information in the other packet, 
extracts an access control policy corresponding to the user 
and the location from a policy database 35, generates a 
certificate, and generates the mapping information of the 
certificate and the access control policy. A server 4 is 
informed of the mapping information of the certificate and 
the access control policy and the access control policy 
itself, and the certificate is reported to the terminal 2. 
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